Fix stale passwords, Anope crash loop, and intranet accuracy

Intranet:
- Replace all 1qaz@WSX3edc default passwords with current rotated values
- Update service credentials: Grafana, Gitea, Zabbix, ArgoCD, Guacamole, IRC
- Fix noc1 password to harbor-badge-kitten-valley-falcon
- Rotate edge1/edge2 passwords (lemon-torch-ruby-raven / nebula-cipher-indigo-tango)
- Update Harvester references to bare-metal RKE2
- Fix RKE2 node IPs (.118-.120 → .11-.13)
- Update status badge to REBUILD COMPLETE
- Fix ISP /28 from BROKEN to LIVE
- Add Traefik dashboard credentials (basicAuth)
- Update all phase progress to 100% Done

IRC:
- Fix Anope db_flatfile crash: fork=no (forked backup fails in container)
- Add client fields to all service blocks (NickServ, ChanServ, etc.)
- Fix log target path (was getting logs/ prefix mangled)
- Improve fix-perms init container (chmod 666, verbose output)

apps/irc/irc.yaml

@@ -283,6 +283,7 @@ data:
     nickserv
     {
     	nick = "NickServ"
+    	client = "NickServ"
     	defaults = "kill_quick ns_secure ns_private hide_email"
     	registration = "none"
     	expire = 90d
@@ -291,6 +292,7 @@ data:
     chanserv
     {
     	nick = "ChanServ"
+    	client = "ChanServ"
     	defaults = "keeptopic peace cs_secure"
     	expire = 14d
     }
@@ -298,28 +300,33 @@ data:
     operserv
     {
     	nick = "OperServ"
+    	client = "OperServ"
     }
 
     botserv
     {
     	nick = "BotServ"
+    	client = "BotServ"
     	defaults = "dontkickops fantasy greet"
     }
 
     hostserv
     {
     	nick = "HostServ"
+    	client = "HostServ"
     }
 
     memoserv
     {
     	nick = "MemoServ"
+    	client = "MemoServ"
     	maxmemos = 20
     }
 
     global
     {
     	nick = "Global"
+    	client = "Global"
     }
 
     opertype
@@ -338,12 +345,12 @@ data:
     db_flatfile
     {
     	database = "/anope/data/anope.db"
-    	fork = yes
+    	fork = no
     }
 
     log
     {
-    	target = "/anope/data/services.log"
+    	target = "services.log"
     	admin = "*"
     	override = "chanserv/* nickserv/* operserv/*"
     	commands = "chanserv/* nickserv/* operserv/*"
@@ -519,9 +526,11 @@ spec:
           command: ["sh", "-c"]
           args:
             - |
-              mkdir -p /data/db /data/logs
+              mkdir -p /data/db /data/logs /data/runtime
-              touch /data/anope.db
+              touch /data/anope.db /data/services.motd
+              chmod 666 /data/anope.db
               chown -R 10000:10000 /data 2>/dev/null || chmod -R 777 /data
+              echo "Anope data dir prepared: $(ls -la /data/anope.db)"
           volumeMounts:
             - name: anope-data
               mountPath: /data